EP3541053B1

EP3541053B1 - Cellular phone system, cellular phone terminal, private information protection method, private information protection program and program recorded medium

Info

Publication number: EP3541053B1
Application number: EP19172743.7A
Authority: EP
Inventors: Hiroaki Dei; Kazunori Ozawa
Original assignee: Rakuten Group Inc
Current assignee: Rakuten Group Inc
Priority date: 2006-05-23
Filing date: 2007-05-22
Publication date: 2021-09-29
Anticipated expiration: 2027-05-22
Also published as: KR20070113158A; CN102209150A; EP1860857A2; JP2007318245A; EP3541053A1; CN101141730B; KR100910430B1; EP1860857A3; US8682323B2; US20070275720A1; CN101141730A

Description

The present invention relates generally to a cellular phone system, a cellular phone terminal, a private information protection method, a private information protection program and a program recorded medium, more specifically to a cellular phone system, a cellular phone terminal, a private information protection method, a private information protection program and a program recorded medium for protecting private information stored in a cellular phone terminal.
Generally, a cellular phone terminal or a portable telephone terminal has an address book function in which the user is able to search the address book of the cellular phone terminal for simply dialing a desired telephone number or sending an electronic mail.
Also, a cellular phone terminal has a mail box function for saving electronic mail information of received electronic mails. Moreover, a cellular phone terminal that is capable of gaining access to internet web pages has a bookmark function to register web page URLs for enabling the user to easily gaining access to his/her favorite web pages as disclosed in the following non-patent documents 1 through 4:

Non-patent document 1: Handley, M., Schulzrinne, H., Schooler, E., Rosenberg, J., "SIP: Session Initiation Protocol", RFC 2543, March 1999
Non-patent document 2: Fielding, R., Gettys, J., Mogul, J., Frystyk, H., Masinter, L., Leach, P., Berners-Lee, T, "Hypertext Transfer Protocol-HTTP/1.1", RFC 2616, June 1999
Non-patent document 3: Berners-Lee, T., Connolly, D., "Hypertext Markup Language-2.0", RFC 1866, November 1995
Non-patent document 4: Crispin, M., "INTERNET MESSAGE ACCESS PROTOCOL-

KR 10-2006-0027065 discloses a voice call dialing method including a first step of the MS transmitting voice data recognized in a voice recognition dialing mode to a mobile switching center (MSC) to request voice recognition dialing; and a voice recognition server storing a telephone number for each registered voice data; a second step of requesting a telephone exchange to search for a telephone number by transmitting the received voice data; a third step of recognizing the position of the mobile communication terminal by the voice recognition server; and a fourth step of detecting a telephone number of a point adjacent to the detected position of the mobile communication terminal among a plurality of telephone numbers allocated and registered and transmitting the detected telephone number to a mobile switching center.
US 2005/0026628 A1 discloses a positional information tracking and forwarding method for conducting an optimal forward destination control method to estimate the situations of a user. A position database stores a plurality of forward destinations for a call to the user that correspond to positional information and time period information (business hours or the like) of the forward destinations. This is used as a search table. For forwarding a call to the user, the current position of the user is detected from the position of a mobile telephone carried by the user, and a forward destination list is created based on the detected current position of the user, the current time, and the search table. The forward destination list enumerates forward destinations that are arranged in an order in which the user is more likely to be present at the forward destinations. The forward destinations are selected one after another in accordance with the forward destination list to forward the call to the user.
However, registration numbers, telephone numbers, electronic mail addresses, bookmark information, electronic mail information and the likes included in the above-mentioned address, bookmark and mailbox functions are private information. In recent years, general public is increasing conscious to protection of private information and it is a social problem that such private information leaks when such cellular phone terminals are lost or stolen.
In order to avoid such problem, there are developed some cellular phone terminals to restrict accessing to the address book and the mail box or dialing by means of password. However, such technique is not sufficient countermeasure against leakage of private information in that considerable burdens are imposed to the user for setting a password or for manually switching to a security mode, which is sometimes failed by the user. Additionally, a cellular phone terminal does not have enough capacity for a password.
Moreover, since mobile centrex is gaining popularity in recent years, cellular phone terminals that can be used also as extensions by a wireless LAN in a company or the like are increasingly popular in a business field. Telephone numbers, mail address information and electronic mail information included in the address book function
in such business use cellular phone terminals are clients' confidential information. As a result, the leakage of such confidential information causes immeasurable impact.
In consideration of the above circumstances, it is an object of the present invention to provide a server in accordance with claim 1.
The present invention also provides a method of a server in accordance with claim 9.
For a more complete understanding of the present invention and the advantages thereof, reference is now made to the following description taken in connection with the accompanying drawings in which the reference numbers indicate like features and wherein:

Fig. 1 shows the system configuration of a first exemplary embodiment of the cellular phone system according to the present invention;
Fig. 2 shows the system configuration of a second exemplary embodiment of the cellular phone system according to the present invention;
Fig. 3 shows the system configuration of a third exemplary embodiment of the cellular phone system according to the present invention;
Fig. 4 shows the system configuration of a fourth exemplary embodiment of the cellular phone system according to the present invention;
Fig. 5 is an exemplified chart to describe how a telephone number search is conducted in the fourth exemplary embodiment of the cellular phone system according to the present invention;
Fig. 6 shows the system configuration of a fifth exemplary embodiment of the cellular phone system according to the present invention;
Fig. 7 is an exemplified chart to describe how a telephone number search is conducted in the fifth exemplary embodiment of the cellular phone system according to the present invention;
Fig. 8 is an exemplified chart to describe how a bookmark search is conducted in the fifth exemplary embodiment of the cellular phone system according to the present invention; and
Fig. 9 is an exemplified chart to describe how an e-mail information search is conducted in the fifth exemplary embodiment of the cellular phone system according to the present invention.

Now, exemplary embodiments of the cellular phone will be described in detail with reference to the accompanying drawings.
Fig. 1 shows the system configuration of the first exemplary embodiment of the cellular phone system according to the present invention. In Fig. 1, Fig. 1 (A) shows an instance when a cellular phone terminal 103 is located within a particular area of the private wireless network known as a wireless LAN area 102 of a wireless LAN access point 101. On the other hand, Fig. 1 (B) shows an instance when a cellular phone terminal 106 is located outside the wireless LAN area 102 but within the wireless cell of a public cellular phone base station 104, that is, within the cellular phone area 105 of the public wireless cellular phone network. As shown in the system configuration in Fig. 1, the cellular phone system of this exemplary embodiment comprises a wireless LAN access point 101, cellular phone terminals 103, 106 and the wireless cellular phone base station 104.
Although the wireless LAN area 102 in Fig. 1 is described as the service area of the wireless LAN access point 101 that is installed in a company, it is not necessarily limited to the wireless LAN and may be any private wireless network that is installed, for example, in a company or the like.
Similarly, although the cellular phone terminals 103 and 106 are described in this particular exemplary embodiment to include three data processing functions that handle private information, i.e., address book functions 103a-106a, bookmark functions 103b-106b and mailbox functions 103c-106c, respectively, it should not be limited to these three data processing functions but is effectively applied to any functions that handle private information.
Each of the cellular phone terminals 103 and 106 is a terminal that can be used in both of a public wireless cellular phone network that is usable in the cellular phone area 105 of the public wireless cellular phone base station 104 and the wireless LAN network that is usable in the wireless LAN area 102 of the wireless LAN access point 101. As shown in Fig. 1 (A), the cellular phone terminal 103 may be located in the particular area of the wireless LAN area 102 in, for example, a company for distinctive business use in the company. For this end, the cellular phone terminal 103 is set so that the three data processing functions of the address book function 103a, the bookmark function 103b and the mailbox function 103c are activated, thereby enabling the user of the cellular phone terminal 103 to use either one of the functions. Accordingly, the user is able to use, for example, the address book function 103a for conducting the search for any telephone number registered in the cellular phone terminal 103 and then calling the telephone number.
On the other hand, the cellular phone terminal 106 is at a remote location from the wireless LAN area 102 but within the public area of the cellular phone area 105 in which general public users can use their cellular phone terminals. At this instance, the cellular phone terminal 105 is set so that the three data processing functions of the address book function 106a, the bookmark function 106b and the mailbox function 106c are inactive and the user of the cellular phone terminal 106 is unable to use any one of the data processing functions. Accordingly, the user is unable to call any telephone number registered in, for example, the address book function 106a or reference to any telephone number in the address book function 106a.
If the cellular phone terminal 103 that was located within the wireless LAN area 102 moves outside the particular area of the wireless LAN area 102, all of the three data processing functions, i.e., the address book function 103a, the bookmark function 103b and mailbox function 103c that handle private information are non-activated or disabled so that the user can no longer use such functions. On the contrary, if the cellular phone terminal 106 that was located outside the wireless LAN area 102 enters the wireless LAN area 102, the three data processing functions handling the private information, i.e., the address book function 106a, the bookmark function 106b and the mailbox function 106c that were unable to be used are activated again so that the user can use such functions.
In general, as shown in the wireless LAN area 102 in Fig. 1, the wireless LAN area is set in a company or the like. Because of a restricted entry in the plant of a company or watching by security personnel or the like, it is not easy for unauthorized persons to enter the plant of a company and use any functions of their cellular phone terminals that handle private information. As a result, persons who use their cellular phone terminals in such wireless LAN area are most likely the users of the cellular phone terminals or other proper users who are permitted to use the cellular phone terminals.
On the contrary, if cellular phone terminals are, for example, lost or stolen and any persons other than their proper users may attempt to use them, it is possible to prevent leakage of private information because such persons are difficult to enter the wireless LAN area and handle private information using the functions of such lost or stolen cellular phone terminals.
In the particular exemplary embodiment, although each data processing function handling private information such as the address book function, the bookmark function and the mailbox function that are installed in the cellular phone terminal is described to be activated or disenabled (non-activated) depending on whether or not the cellular phone terminal is located in the wireless LAN area, it is possible to change the data processing functions so that activation/non-activation of the data processing functions is set by activation/non-activation means depending on the user of the cellular phone terminal. In other words, at least one of the data processing functions may be set to be activated by the activation means or disabled by the non-activation means depending on the user of the cellular phone terminal.
It is also possible to provide a plurality of wireless LAN areas so as to change the data processing functions to be restricted for each wireless LAN area, at least a part of the data processing functions to be restricted, or the information to be activated or non-activated, for example, in the address book for each wireless LAN area. In other words, at least one part of function of at least one of the data processing functions that are activated by the activation means or disabled by the non-activation means are changed depending on any one of the plurality of private wireless networks. For example, in case of application in a company, wireless LAN areas that can be entered are differentiated depending on the user's position in the company, the degree of protecting individual private information is controlled for each wireless LAN area in which the user enters.
The second exemplary embodiment is a cellular phone terminal provided with both connection means for connecting to a public wireless cellular phone network that can be used by general public users and for connecting to a private wireless network that particular users are permitted to use as a closed network, wherein the cellular phone terminal includes at least one of the following data processing functions

(a) an address book function,
(b) a bookmark function, and
(c) a mailbox function

(a) an address book server that stores address book information to be used in the address book function,
(b) a bookmark information server that stores bookmark information to be used in the bookmark function, and
(c) a mailbox server that stores electronic mail information to be used in the mailbox function that can be connected from the private wireless network.

In the second exemplary embodiment, when the cellular phone terminal enters the area of the private wireless network, at least one part of at least one of the three data processing functions is activated by the activation means included in the cellular phone terminal, information related to the users of the cellular phone terminal from at least one server of the three servers and/or at least one part of the information common to each user is downloaded and stored in the cellular phone terminal by the download means provided in the cellular phone terminal. On the other hand, when the cellular phone terminal exits outside the area of the private wireless network, at least one part of the information of the server that is downloaded and stored in the cellular phone terminal by the download means is deleted by deleting means provided in the cellular phone terminal and at least one part of the activated functions is disabled by non-activation means provided in the cellular phone terminal.
Now, this exemplary embodiment will be described in detail with reference to the drawings.
Fig. 2 shows the system configuration of the second embodiment of the cellular phone system according to the present invention. As shown in the system configuration in Fig. 2, this embodiment of the cellular phone system comprises a network 202, a wireless LAN access point (WLAN AP) 203, an address book server 204, a bookmark information server 205, a mailbox server 206 and a cellular phone terminal 208.
Fig. 2 shows the system configuration of the second exemplary embodiment of the cellular phone system. As shown in the system in Fig. 2, the cellular phone system in this particular embodiment comprises a network 202, a wireless LAN access point (WLAN AP) 203, an address book server 204, a bookmark information server 205, a mailbox server 206 and a cellular phone terminal 208.
It is described that a wireless LAN area 209 in Fig. 2 is the service area of the wireless LAN access point 203 that is installed in a company. However, it is to be noted that the present invention should not be limited only to a wireless LAN but may be any private wireless network.
Similarly, this exemplary embodiment is described that the cellular phone terminal 208 is provided with three data processing functions, i.e., an address book function 208a, a bookmark information function 208b and a mailbox function 208c as private information handling functions.
The cellular phone terminal 208 is a terminal that can be used in either one of the public wireless cellular phone network that is usable in the cellular phone area of the wireless cellular phone base station (not shown in Fig. 2) and the wireless LAN network that is usable in the wireless LAN area 209 of the wireless LAN access point 203 as shown in Fig. 2. As shown in Fig. 2, the cellular phone terminal 208 is located in a particular area of the wireless LAN area 209 installed, for example, in a company and is in the distinctive condition to be used for the business of the company.
In this instance, the cellular phone terminal 208 is set so that the three data processing functions, i.e., the address book function 208a, the bookmark function 208b and the mailbox function 208c are activated. Accordingly, the user of the cellular phone terminal 208 is able to connect to the address book server 204, the bookmark information server 205 and the mailbox server 206 by way of the wireless LAN access point 203 and the network 202 for downloading the user data (private information) of the cellular phone terminal 208 and/or data common to any users. The cellular phone terminal 208 is in the condition that the user is able to use the downloaded data. This means that as long as the cellular phone terminal 208 is in the wireless LAN area 209 the user is able to use, for example, the address book function 208a for conducting the search for any telephone number downloaded in the cellular phone terminal 208 from the address book server 204 and calling the telephone number.
On the other hand, in an instance when the cellular phone terminal 208 moves outside the wireless LAN area 209 of the wireless LAN access point 203, the user data that is downloaded from the address book server 204, the bookmark information server 205 and the mailbox server 206 is deleted and the three data processing functions handling private information, i.e., the address book function 208a, the bookmark function 208b and the mailbox function 208c that were usable in the wireless LAN area 209 are non-activated. Either one of the data processing functions is no longer available to the user of the cellular phone terminal 208. As a result, the user of the cellular phone terminal 208 is unable to, for example, call any telephone number that is downloaded in the address book function 208a from the address book server 204 or make reference to any telephone number, thereby preventing private information from leaking in the similar manner as in the first embodiment.
On the contrary, in an instance when the cellular phone terminal 208 that was outside the wireless LAN area 209 enters the wireless LAN area 209, the three data processing functions handling private information, i.e., the address book function, the bookmark function and the mailbox function that were not available are now activated. The cellular phone terminal 208 can be connected to the address book server 204, the bookmark information server 205 and the mailbox server 206 by way of the wireless LAN access point 203 and the network 202 for enabling the user of the cellular phone terminal 208 to download the respective user data (private information) and/or any data common to all users for subsequent use of the downloaded data.
Generally, as shown by an entry management area 201 in Fig. 2, the wireless LAN area 209 is installed in a company or the like where entry in its plant is restricted or watched by security personnel or the like. It is therefore difficult for anyone other than authorized users of the cellular phone terminal to enter the wireless LAN area 209 in such company and use the functions of the cellular phone terminal for downloading user data (private information) or the like on the user of the cellular phone terminal from the address book server 204, the bookmark information server 205 and the mailbox server 206 and use the user data 8private information). Accordingly, it is most likely that the person who uses the cellular phone terminal 208 in the wireless LAN area 209 is the proper user of the cellular phone terminal or authorized users of such cellular phone terminal.
Activation or non-activation of the three data processing functions, i.e., the address book function, the bookmark function and the mailbox function that handle private information and then downloading or deletion of user data (private information) from the address book server 204, the bookmark information server 205 and the mailbox server 206 is described to be made depending on whether the cellular phone terminal enters the wireless LAN area or moves outside the wireless LAN area in this particular embodiment. However, it is possible to differently set the activation/non-activation of the data processing functions or change the information (user data) to be downloaded/deleted depending on the user of the cellular phone terminal. In other words, change is made in at least one part of the function of at least one data processing functions that is activated by activation means or non-activated by non-activation means depending on the user of the cellular phone terminal. Alternatively, it is set to change at least one part of the information of the information (user data) to be downloaded/deleted depending on the user of the cellular phone terminal.
It is also possible to provide a plurality of wireless LAN areas and change the data processing functions to be restricted for each wireless LAN area, differentiate at least one part of function of the data processing functions to be restricted, change the information (user data) to be downloaded/deleted, or change the information (user data) to be downloaded/deleted, for example, in the address book for each wireless LAN area. Moreover, it is possible to set so as to change at least one part of the function of at least one data processing functions or change at least one part of information of the information (user data) to be downloaded/deleted depending on locations of the wireless LAN areas. This means that at least one part of the function of at least one data processing function of the data processing functions to be activated by activation means or non-activated by non-activation means is set differently depending on the plurality of private networks. Moreover, at least one part of the information of the information that are stored by downloading by downloading means or deleted by deleting means is differentiated. In this instance, in case of the use, for example, in a company in which different wireless LAN areas are prepared depending on user' s business position, it is possible to control the degree of protection of the respective information for each wireless LAN area where the user enters.
The third exemplary embodiment is the cellular phone system in which the cellular phone terminal is provided with connection means for connecting to a public wireless cellular phone network to be used by general public users and also to a private wireless network to be used by particular users as a closed local network, the cellular phone terminal is further provided with as a private information handling function at least one data processing function of:

In this particular exemplary embodiment, when the cellular phone terminal enters the area of the private wireless network, at least one part of information of at least one of the three data processing functions is activated by activation means provided in the cellular phone terminal and at least one part of information that is encrypted and stored is restored by restoration means that is provided in the cellular phone terminal for making it available to the cellular phone terminal. On the other hand, when the cellular phone terminal moves outside the area of the private wireless network, at least one part of information that is restored by the restoration means is encrypted by the encryption means that is included in the cellular phone terminal for storage and at least one function of the functions that are activated by the activation means is non-activated by the non-activation means included in the cellular phone terminal.
Moreover, the cellular phone terminal of this particular embodiment comprises an encryption key server that stores encryption key data for encrypting information to be stored in each data processing function or to restore the encrypted information. The cellular phone terminal may includes encryption key acquisition means for acquiring encryption key data from the encryption key server for the cellular phone terminal user. In case of restoring information stored in each data processing function after encryption by using the encryption key data that is acquired from the encryption key server, when storing the restored information after encrypting such information again, it is possible to encrypt again at least one part of information of at least one of the restored information by using the same encryption key data that is acquired from the encryption key server by the encryption key acquisition means at the time of restoration. Encryption may be made by using encryption key data different from the one that is acquired by the encryption key acquisition means at the time of restoration.
Now, a detailed description of this particular exemplary embodiment will be made hereunder with reference to the drawings.
Fig. 3 shows a system configuration of the third exemplary embodiment of the cellular phone system according to the present invention. As shown in the system configuration in Fig. 3, this particular embodiment of the cellular phone system comprises a network 302, a wireless LAN access point (WLAN AP) 303, a key data server 310 and a cellular phone terminal 308.
Although the wireless LAN area 309 in Fig. 3 will be described as a service area of the wireless LAN access point 303 installed in a company, it should not be restricted to a wireless LAN but may be a private wireless network installed, for example, in a company.
Similarly, although this particular exemplary embodiment will be described that the cellular phone terminal 308 is provide with three data processing functions, i.e., an address book function 308a, a bookmark function 308b and a mailbox function 308c as private information handling functions.
The cellular phone terminal 308 is a terminal that can be used in either one of a public wireless cellular phone network usable in a cellular phone area of a wireless cellular phone base station that is not shown in Fig. 3 and a wireless LAN network usable in the wireless LAN area 309 of the wireless LAN access point 303 in Fig. 3. As shown in Fig. 3, the cellular phone terminal 308 is located in a particular area so-called the wireless LAN area 309, for example, in a company and is in a distinctive condition to be used for the business of the company.
At this time, the cellular phone terminal 308 is in the condition that the three data processing functions of the address book function 308a, the book mark function 308b and the mailbox function 308c are activated. This means that the user of the cellular phone terminal 308 is able to use any one of the data processing functions after restoring information stored in the address book, the bookmark and the mailbox by using the encryption key data that is prepared in advance for the user of the cellular phone terminal 308 or by using the encryption key data for the user of the cellular phone terminal 308 that is downloaded from the key data server 310 to be connected by way of the wireless LAN access point 303 and the network 302. Accordingly, as long as the user remains in the wireless LAN area 309, he/she is able to use, for example, the address book function 308a and conduct a search for a particular telephone number memorized in the cellular phone terminal 308 in the restored condition and call the phone number.
On the other hand, when the cellular phone terminal 308 moves outside the wireless LAN area 309 of the wireless LAN access point 303, information restored using the encryption key data for the user of the cellular phone terminal 308 is encrypted again using the encryption key data and stored in the address book, the bookmark and the mailbox. The three data processing functions of the address book function 308a, the book mark function 308b and the mailbox function 308c handling private data that were usable so far are now set to the non-activation condition, thereby disabling the user of the cellular phone terminal 308 to use anyone of the data processing functions. Accordingly, so long as the user is outside the wireless LAN area 309, he/she is unable to call using any telephone number registered in, for example, the address book function 308a or browse the telephone numbers, thereby preventing private information from leaking in the similar manner as the first and second embodiments.
When moving outside the wireless LAN area 309, it is possible to perform encryption without newly acquiring the encryption key data from the key data server 310 if encrypted information is stored in the address book, the bookmark and the mailbox by using the same encryption key data as used for restoration when entered the wireless LAN area. On the other hand, in case of using any encryption data different from the one used for restoration when entering the wireless LAN area 309, protection for private information to be stored in the address book, the bookmark and the mailbox will be enhanced. In this case, it is necessary to save the different encryption data used for encryption in the key data server 310 by way of the wireless LAN access point 303 and the network 302 in preparation for the next entrance in the wireless LAN area.
On the contrary, when the cellular phone terminal that was outside the wireless LAN area 309 enters the wireless LAN area 309, the three data processing functions of handling private information, i.e., the address book function, the bookmark function and the mailbox function that were not usable are now activated. This means that the user of the cellular phone terminal is able to use anyone of the data processing functions by restoring the information stored in the address book, the bookmark and the mailbox using the encryption key data that is prepared in advance for the user of the cellular phone terminal or an encryption key data for the user of the cellular phone terminal that is downloaded from the key data server 310 after connecting by way of the wireless LAN access point 303 and the network 302.
Generally, as shown in the entrance/exit management area 301 in Fig. 3, the wireless LAN area 309 is installed in a company or the like where anybody other than proper user of the cellular phone terminal is difficult to enter the wireless LAN area 309 in such company for handling the private information by utilizing the functions in the cellular phone terminals because of restricted entry into the plant of such company or careful watching by security personnel or the like. Accordingly, it is most likely that persons who use the cellular phone terminal in the wireless LAN area 309 are the proper user of the cellular phone terminal or other users permitted to use such cellular phone terminal.
It is described in this particular embodiment that activation or non-activation of the three data processing functions of the address book function, the bookmark function and the mailbox function and subsequent restoration or encryption of the information (private information) stored in the address book, the bookmark and the mailbox is performed depending on whether the cellular phone terminal is in the wireless LAN area or outside such area. It is to noted, however, that the data processing functions to be activated or non-activated and the information (user data) to be restored or encrypted may be set to differ depending on the user of the cellular phone terminal. In other words, out of at least one data processing functions that are activated by the activation means or non-activated by the non-activation means depending on the user of the cellular phone terminal, at least one part of such functions is differentiated and at least one part of information of the restored /encrypted information (user data) may be differentiated.
It is also possible to provide a plurality of wireless LAN areas each having different data processing functions to be restricted, differentiate at least one part of data processing functions to be restricted, differentiate information (user data) to be restored/encrypted, or differentiate information (user data) to be restored/encrypted in, for example, the address book. This means that at least one part of the function of at least one of the data processing functions to be activated by the activation means or non-activated by the non-activation means is set to be different depending on particular one of the plurality of private wireless networks. Moreover, it is possible to differentiate at least one part of information of the information to be restored by the restoration means or encrypted by the encryption means. In this case, if it is the use in, for example, a company, it is possible to enhance the protection of individual information for each wireless LAN area by differentiating the wireless LAN areas that are permitted to enter depending on the business position of the user in the company.
The fourth exemplary embodiment of the present invention comprises a cellular phone terminal provided with means for connecting to a public wireless cellular phone network usable by general public users and an address book server including means for connecting to a private network usable by particular users as a closed network and means for connecting to a public telephone network to which a wireless cellular phone base station of the public wireless cellular phone network or an IP network, wherein the cellular phone terminal calls the address book server and then the address book server calls based on the address book information stored in the address book server for relaying the call of the cellular phone terminal or transferring the call from the cellular phone terminal.
Moreover, the cellular phone terminal may comprise at least one of

(a) a calling function using ISDN sub-address and
(b) a DTMF signal transmission function

Now, the fourth exemplary embodiment will be described in detail with reference to the accompanying drawings.
Fig. 4 shows the system configuration of the fourth exemplary embodiment of the cellular phone system according to the present invention. As shown in the system configuration in Fig. 4, the fourth exemplary embodiment of the cellular phone system comprises an address book management system 401, a telephone network 404, a wireless cellular phone base station 405, cellular phone terminals 406, 407 and a telephone terminal 408. The address book management system 401 comprises a network 402, an address book server 403 and a presence server 409. The presence server 409 is a presence device that registers current locations of users of the cellular phone terminals.
It is to be noted in this exemplary embodiment that the telephone network 404 may be a VoIP (Voice over IP) that uses an IP network and a Session Initiation Protocol (SIP) for connecting a call.
The cellular phone terminal 406 has no telephone number data as the address book in the cellular phone terminal 406. As a result, in order to use the address book function, firstly, it is necessary to call the address book server 403 in the address book management system 401 for making connection to the address book server 403 by way of the wireless cellular phone base station 405 and the telephone network 404. The address book server 403 that is connected to the telephone network 404 receives the call from the cellular phone terminal 406. A judgment is made on the user of the cellular phone terminal 406 from the telephone number of the calling cellular phone terminal 406 and a search is conducted on the private information (user data) for the user in the address book. Then, the call of the cellular phone terminal 406 is transferred to the cellular phone terminal 407 or the telephone terminal 408 that the user likes to call or alternatively such call from the cellular phone 406 is relayed by the address book server 403 to call the cellular phone terminal 407 or the telephone terminal 408.
Unexpectedly, if the cellular phone terminal 406 is lost or stolen, such case has immediately been registered in the address book server 403. When the address book server 403 is called by the cellular phone terminal 406, leakage of private information is prevented by refusing to receive the call by the address book server 403 or by prohibiting the search of the address book by the cellular phone terminal 406. In other words, if there is a call from the cellular phone terminal 406 to prohibit the use of the address information that is stored in the address book server 403 or non-permitted telephone number, the address book server 403 is able to set not to relay or transfer any call from the particular cellular phone terminal 406.
Moreover, if it is possible to recognize the location of the user of the cellular phone terminal 406 by means of, for example, entrance permission to the plant, entrance/exit management or the like and report it to the presence server 409 in the address book management system 401, the address book server 403 that receives a call from the cellular phone terminal 406 asks the presence server 409 about the location of the user of the cellular phone terminal 406. After confirming whether user is in the plant or not, a decision is made whether the search of the address book or transfer or relay of a call should be permitted or refused, thereby restricting any unauthorized use of the address book in case when the cellular phone terminal is lost or stolen.
Methods of searching a desired number for connecting the cellular phone terminal 406 by the address book server 403 include the use of the sub-address of the ISDN, the use of the DTMF signal or by voice recognition. Such search methods will be described further with reference to Fig. 5. Fig. 5 is a chart to describe one exemplified search method of telephone numbers in the fourth embodiment of the cellular phone system according to the present invention.
In Fig. 5, the cellular phone terminal 505 (corresponding to the cellular phone terminal 406 in Fig. 4) is connected to the address book server 502 (corresponding to the address book server 403 in Fig. 4) by way of the wireless cellular phone base station 504 and the telephone network 503. Assuming in this instance that, for example, the user of the cellular phone terminal 505 likes to call a cellular phone terminal of "person A", "aaaa (number) " is assigned to the address book server 502 as the sub-address of the ISDN. Then, the address book server 502 conducts a search of the address book for the user of the cellular phone terminal 505 using the number "aaaa" for transferring to the telephone number for "person A" or relaying the call to "person A" and the call of the cellular phone terminal 505.
Similarly, as for the method of using the DTMF signal, if the user of the cellular phone terminal 505 likes to call, for example, "person B", the cellular phone terminal 505 sends the DTMF signal "bbbb (number)" to the address book server 502 by key operation. Then, the address book server 502 searches the address book of the user of the cellular phone terminal 505 using the number "bbbb", thereby transferring to the telephone number of "person B" or relaying the call to "person B" and the call of the cellular phone terminal 505.
Similarly, as for the method by voice recognition, if the user of the cellular phone terminal 505 likes to call, for example, "person C", voice instructions such as "person C" or "cccc" are given to the address book server 502. Then, the voice recognition function of the address book server 502 recognizes the voice instructions and transfers to the telephone number of "person C" or relays the call to "person C" and the call the cellular phone terminal 505. Additionally, if voice certification is made in the voice recognition, it is possible to restrict the use of the address book of the address book server 502 by any unauthorized user of the cellular phone terminal.
The fifth exemplary embodiment is the cellular phone system comprising a cellular phone terminal including means for connecting to an IP network by way of a public wireless cellular phone network to be used by general public, an address book server including means for connecting to the IP network by way of an HTTP server in a private network to be used by particular users as a closed network, a book mark information server including means for connecting to the IP network by way of the HTTP server in a private network to be used by particular users as a closed network, a mailbox server including means for connecting to the IP network by way of the HTTP server in a private network to be used by particular users as a closed network, and the HTTP server connected to the IP network for disclosing information stored in the address book server, the book mark information server and the mailbox server in accordance with the HTTP (HyperText Transfer Protocol) protocol.
In this exemplary embodiment, the cellular phone terminal is connected to the HTTP server for calling based on the telephone number information as included in the address book server. Alternatively, it transmits electronic mails based on the mail address information as included in the address book server, makes an internet web connection based on the book mark information as included in the bookmark information server, or browses electronic mail information as included in the mailbox server.
Moreover, if the cellular phone terminal is connected to the HTTP server, the cellular phone terminal user certification is performed to decide whether or not information can be disclosed. It is possible not to disclose information to particular cellular phone terminal.
Now, the fifth exemplary embodiment will be described in detail hereunder with reference to the accompanying drawing.
Fig. 6 shows the system configuration of the fifth exemplary embodiment of the cellular phone terminal according to the present invention. As shown in the system configuration in Fig. 6, this exemplary embodiment of the cellular phone system comprises a cellular phone private information management system 601, an IP network 608, a telephone network 609, a wireless cellular phone base station 610, cellular phone terminals 611, 612 and a telephone terminal 613. The cellular phone private information management system 601 comprises a network 602, an address book server 603, a bookmark information server 604, a mailbox server 605, a presence server 606 and an HTTP server 607. The HTTP server 607 in this particular exemplary embodiment is provided with a certification server 607a for performing user certification.
It is to be noted in this exemplary embodiment that the telephone network 609 may be a VoIP (Voice over IP) telephone that uses an IP network and connects a call using an SIP (Session Initiation Protocol) protocol. In this case, the telephone network 609 may be integrated with the IP network 608.
The cellular phone terminal 611 does not hold any data such as telephone number data as the address book, bookmark information, electronic mails or the like inside the cellular phone terminal 611. As a result, in order to use such data, it is first required to connect to the HTTP server 607 in the cellular phone private information management system 601 by way of the wireless cellular phone base station 610 and the IP network 608. The HTTP server 607 connected to the IP network 608 receives a connection request from the cellular phone terminal 611 and starts the certification server 607a for performing user certification of the cellular phone terminal 611 by means of, for example, a password or the like. If the connection of the cellular phone terminal 611 is permitted by the certification server 607a, the HTTP server 607 discloses the user data (private information) on the user that is stored in the address book server 603, the bookmark server 604 and the mailbox server 605 in accordance with HTTP or HTTPS protocol. It is possible to use the browsing technique by, for example, HTTP or HTTPS in the cellular phone terminal 611 for the way of disclosing such data. It is also possible to provide the certification server 607a separately from the HTTP server 607, thereby performing the user certification of the cellular phone terminal 611 by accessing the certification server 607a when the address book server 603, the bookmark information server 604 or the mailbox server 605 when the cellular phone terminal 611 connects thereto.
In an event that the cellular phone terminal 611 is lost or stolen, such event is immediately registered in the HTTP server 607. When the HTTP server 607 receives a connection request from the cellular phone terminal 611, the HTTP server 607 is able to refuse the connection from the particular cellular phone terminal or the connection request is refused by user certification by the certification server 607a, thereby preventing leakage of private information. In other words, the HTTP server 607 is able to prohibit connection to the address book server 603, the bookmark information server 604 or the mailbox server 605 or alternatively to refuse connection to the cellular phone terminal 611 when there is a receiving call from the cellular phone terminal 611 having the non-permitted telephone number. Moreover, it is possible that the address book server 603, the bookmark information server 604 or the mailbox server 605 is prohibited to use the address book data stored in the address book server 603, the bookmark information stored in the bookmark information server 604 or the electronic mail information stored in the mailbox server 605 or alternatively refusing connection to the cellular phone terminal 611 when there is a connection request from the cellular phone terminal 611 having the non-permitted telephone number by way of the HTTP server 607.
Furthermore, in case of registering the location of the user of the cellular phone terminal 611 in the presence server 606 in the cellular phone private information management system 601 by recognizing through any method such as, for example, entrance/exit control or the like by entrance permission, etc., the HTTP server 607 that receives a connection request from the cellular phone terminal 611 asks the presence server 606 about the location of the user of the cellular phone terminal 611. After confirming whether or not the user is in the plant, a decision will be made whether the information in the address book, the bookmark or the mailbox should be disclosed or refused, thereby restricting the use of such private information in case when the cellular phone terminal 611 is lost or stolen. Instead of asking the present location of the user of the cellular phone terminal 611 by the HTTP server 607, it is also possible that the address book server 603, the bookmark information server 604 or the mailbox server 605 asks the location of the user and a decision is made whether the connection to the cellular phone terminal 611 is permitted or refused based on the current location of the user of the cellular phone terminal 611 that is registered in the presence server 606 at the time of connection from the cellular phone terminal 611.
Now, a method of searching the address book server 603 or the bookmark information server 604 for a desired telephone number that the cellular phone terminal 611 is connected will be described further with reference to Fig. 7 in an example of the address book server 603. Fig. 7 is a chart to describe one example of searching a telephone number in the fifth embodiment of the cellular phone system.
In Fig. 7, the cellular phone terminal 705 (corresponding to the cellular phone terminal 611 in Fig. 6) is connected to the HTTP server 701 (corresponding to the HTTP server 607 in Fig. 6) by way of a wireless cellular phone base station 704 and an IP network 703. After passing the certification in the HTTP server 701, it is possible on the cellular phone terminal 705 to browse the address to contact each user of the cellular phone terminal 705 that is stored in an address book server 702 (corresponding to the address book server 603 in Fig. 6).
If the user of the cellular phone terminal 705 chooses one address for, for example, "person A" among many addresses that he/she browsed, the HTTP server 701 calls the telephone number of "person A" using, for example, "phone to" in the HTML language. In this way, it is possible to call the telephone number in the address book on the cellular phone terminal 705 that is stored in the address book server 702 without saving the telephone number information in the cellular phone terminal 705. In other words, if described based on the system configuration in Fig. 6, one of the telephone numbers that are registered in the address book server 603 as private information of the user of the cellular phone terminal 611 is selected and the telephone number that is described in the HTML language "phone to" is transmitted to the IP network 608, thereby enabling to call the cellular phone terminal 612 or the telephone terminal 613 by way of, for example, the telephone network 609.
Subsequently, a method of searching a desired bookmark of the cellular phone terminal 611 in the bookmark information server 604 will be described further with reference to Fig. 8. Fig. 8 is a chart to describe an exemplified method of searching bookmarks in the fifth embodiment of the cellular phone system.
In Fig. 8, a cellular phone terminal 805 (corresponding to the cellular phone terminal 611 in Fig. 6) is connected to an HTTP server 801 (corresponding to the HTTP server 607 in Fig. 6) by way of a wireless cellular phone base station 804 and an IP network 803. After passing certification by the HTTP server 801, it is possible on the cellular phone terminal 805 to browse bookmark information on the users of the cellular phone terminal 805 stored in a bookmark information server 802 (corresponding to the bookmark information server 604 in Fig. 6) in accordance with HTTP or HTTPS.
When the user of the cellular phone terminal 805 chooses a bookmark information, for example, his/her "favorite A" from the browsed bookmark information, the HTTP server 801 makes a connection to a web server of his/her "favorite A" described in, for example, "URL" in the HTML language. In this manner, it is possible to access the web server on internet using the bookmark information on the cellular phone terminal 805 that is stored in the bookmark information server 802 without saving the bookmark information in the cellular phone terminal 805. In other words, if described using the system configuration in Fig. 6, any one of the bookmark information that is registered in the bookmark information server 604 as the private information for the user of the cellular phone terminal 611 for transmitting the address information described in "URL" in the HTML language to the IP network 608, thereby enabling to access to the web server on internet.
Now, a method of searching desired electronic mail information of the cellular phone terminal 611 by the mailbox server 605 is described further with reference to Fig. 9. Fig. 9 is a chart to describe an exemplified method of searching electronic mail information in the fifth exemplary embodiment of the cellular phone system.
In Fig. 9, a cellular phone terminal 905 (corresponding to the cellular phone terminal 611 in Fig. 6) is connected to an HTTP server 901 (corresponding to the HTTP server 607 in Fig. 6) by way of a wireless cellular phone base station 904 and an IP network 903. After passing certification in the HTTP server 901, it is possible to browse on the cellular phone terminal 905 electronic mail information on users of the cellular phone terminal 905 stored in a mailbox server 902 (corresponding to the mailbox server 605 in Fig. 6) in accordance with HTTP, HTTPS or IMAP4 protocol.
When the user of the cellular phone terminal 905 chooses one of the electronic mail information, for example, electronic mail 1 from the browsed electronic mail information, the HTTP server 901 reads out the electronic mail 1 under the title of "Request for ......." stored in the mailbox server 902 and transmits it to the cellular phone terminal 905 in accordance with the HTTP, HTTPS or IMAP4 protocol. In this manner, it is possible to browse the electronic mail information on the cellular phone terminal 905 stored in the mailbox server 902 without saving the electronic mail information in the cellular phone terminal 905. In other words, describing in the system configuration in Fig. 6, it is possible to browse any desired electronic mail information in accordance with HTTP, HTTPS or IMAP4 protocol by choosing any one of the electronic mail information stored in the mailbox server 605 as the private information of the user of the cellular phone terminal 611.
As described in greater detail hereinabove, the exemplary embodiments are able to surely prevent private information from leaking in an unexpected situation when the cellular phone terminal is lost or stolen. Also, the present invention provides the aforementioned advantage without causing any inconvenience to the user of the cellular phone terminal. Moreover, the present invention is able to provide the aforementioned advantage with paying essentially no attention to private information protection by the user of the cellular phone terminal.

Claims

An address book server (403, 502) for relaying or transferring a call, the call being from a first phone terminal (406, 505) to the address book server (403, 502), to a second phone terminal (407) or a third phone terminal (408) of a recipient, the address book server (403, 502) configured to:
store identification information of the second phone terminal (407) and identification information of a user of the second phone terminal (407) in association with each other, and store identification information of the third phone terminal (408) and identification information of a user of the third phone terminal (408) in association with each other;

receive the call from the first phone terminal (406, 505) ;

search for the identification information of the second phone terminal (407) or the third phone terminal (408) of the recipient that is associated with either:
(i) the identification information of the user identified by voice recognition on voice information received from the first phone terminal (406, 505) as an instruction of a user of the first phone terminal (406, 505), or

(ii) the identification information of the user received from the first phone terminal (406, 505) as the instruction, the identification information being in a form of an Integrated Services Digital Network, ISDN, sub-address or a Dual-Tone Multi-Frequency, DTMF, signal; and

make a call to the second phone terminal (407) or the third phone terminal (408) of the recipient corresponding to the searched identification information so as to relay or transfer, to the second phone terminal (407) or the third phone terminal (408) of the recipient, the call from the first phone terminal (406, 505),

wherein the first phone terminal (406, 505) and the second phone terminal (407) are cellular phone terminals,

the user of the second phone terminal (407) is different from the user of the third phone terminal (408),

the recipient is either the user of the second phone terminal (407) or the user of the third phone terminal (408).
The address book server (403, 502) of claim 1,
wherein the identification information of the user of the second phone terminal (407) comprises an identification number of the user of the second phone terminal (407) and

the identification information of the user of the third phone terminal (408) comprises an identification number of the user of the third phone terminal (408).
The address book server (403, 502) of claim 1 or 2, further configured to
conduct voice certification also on the voice information received from the first phone terminal (406, 505), and restrict search of the identification information of the second phone terminal (407) or the third phone terminal (408) of the recipient when the voice certification is unsuccessful.
The address book server (403, 502) of claim 1 or 2, further configured to
register identification information of the first phone terminal (406, 505) in order for the first phone terminal (406, 505) to be prohibited from using the identification information of the second phone terminal (407) and the identification information of the third phone terminal (408) that are stored, and

prohibit, when the call from the first phone terminal (406, 505) is received and the identification information of the first phone terminal (406, 505) is already registered, search of the identification information of the second phone terminal (407) or the third phone terminal (408) of the recipient such that the call is not relayed or transferred.
The address book server (403, 502) of claim 3, further configured to
register identification information of the first phone terminal (406, 505) in order for the first phone terminal (406, 505) to be prohibited from using the identification information of the second phone terminal (407) and the identification information of the third phone terminal (408) that are stored, and

prohibit, when the call from the first phone terminal (406, 505) is received and the identification information of the first phone terminal (406, 505) is already registered, the search of the identification information of the second phone terminal (407) or the third phone terminal (408) of the recipient such that the call is not relayed or transferred.
The address book server (403, 502) of any one of claims 1 to 5, wherein
the identification information of the second phone terminal (407) is a phone number or an Internet Protocol (IP) address of the second phone terminal (407), and

the identification information of the third phone terminal (408) is a phone number or an Internet Protocol (IP) address of the third phone terminal (408).
A system, comprising:
the address book server (403, 502) of any one of claims 1 to 6; and

a presence server (409) configured to register a current location of the user of the first phone terminal (406, 505), wherein

the address book server (403, 502) is configured to determine to permit or refuse relay or transfer of the call based on the registered location of the user of the first phone terminal (406, 505) registered by the presence server (409) .
The system according to claim 7, further comprising:
the first phone terminal (406, 505) and the second phone terminal (407), wherein

the first phone terminal (406, 505) and the second phone terminal (407) are adapted to connect to a public wireless cellular phone network.
A method of an address book server (403, 502) for relaying or transferring a call, the call being from a first phone terminal (406, 505) to the address book server (403, 502), to a second phone terminal (407) or a third phone terminal (408) of a recipient, the method comprising:
storing, by the address book server (403, 502), identification information of the second phone terminal (407) and identification information of a user of the second phone terminal (407) in association with each other, and identification information of the third phone terminal (408) and identification information of a user of the third phone terminal (408) in association with each other;

receiving, by the address book server (403, 502), the call from the first phone terminal (406, 505);

searching, by the address book server (403, 502), for the identification information of the second phone terminal (407) or the third phone terminal (408) of the recipient that is associated with either:
(i) the identification information of the user identified by voice recognition on voice information received from the first phone terminal (406, 505) as an instruction of a user of the first phone terminal (406, 505), or

(ii) the identification information of the user received from the first phone terminal (406, 505) as the instruction, the identification information being in a form of an Integrated Services Digital Network, ISDN, sub-address or a Dual-Tone Multi-Frequency, DTMF, signal; and

making, by the address book server (403, 502), a call to the second phone terminal (407) or the third phone terminal (408) of the recipient corresponding to the searched identification information so as to relay or transfer, to the second phone terminal (407) or the third phone terminal (408) of the recipient, the call from the first phone terminal (406, 505),

wherein the first phone terminal (406, 505) and the second phone terminal (407) are cellular phone terminals,

the user of the second phone terminal (407) is different from the user of the third phone terminal (408), and

the recipient is either the user of the second phone terminal (407) or the user of the third phone terminal (408).